The Postback management section controls how Aftrad receives and validates conversion postbacks from an Advertiser. It allows you to restrict which IPs and domains are allowed to send postbacks, and to configure the default Postback URL domain shown to the Advertiser.
How to access it
Go to Advertisers, open the Advertiser's profile, and navigate to General > Main setup > Postback management.
Configuration options
Secure Event Postback source IPs (optional) — a list of IP addresses from which Aftrad will accept postbacks from this Advertiser. Enter each IP in the format
192.168.0.1. If left empty, postbacks from any IP address are accepted.Postback URL is restricted to exclusive event domains — if set to Yes, Aftrad will only accept postbacks received from the domains listed in Exclusive event domains. This is an additional security layer on top of IP whitelisting.
Exclusive event domains (optional) — the list of domains from which postbacks are accepted when the restriction above is enabled.
Default event domain (mandatory) — the domain pre-selected by default in the Postback URL tab when you copy the Postback URL to share with the Advertiser. All available Postback URL domains are accessible from that tab's selector.
💡 Tip: For maximum security, combine both Secure Event Postback source IPs and Postback URL is restricted to exclusive event domains. This ensures postbacks are only accepted from known IPs and known domains.
⚠️ Important: If you enable domain restriction but leave Exclusive event domains empty, no postbacks will be accepted. Always add at least one domain before enabling the restriction.